Threat Intelligence Engineer: AI Security & Detection

Anthropic; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Anthropic is seeking a Threat Intelligence Engineer to track threat actors targeting AI labs and cloud infrastructure, turning findings into actionable detections and defenses. You will build automated pipelines to collect, enrich, and operationalize indicators of compromise, and run intelligence-driven threat hunts across endpoints, cloud, and SaaS telemetry.

You will also analyze malware and attacker tooling, translate intelligence into detection rules, and collaborate with incident response

Qualifications

• 5+ years hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis at an organization facing sophisticated adversaries.
• Deep, demonstrable knowledge of specific nation-state or advanced criminal threat actors—their tooling, infrastructure patterns, tradecraft, and targeting.
• Strong engineer: you write production-quality Python (or similar), have built automation and data pipelines.

Responsibilities

• Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the broader technology sector—producing timely, actionable intelligence for Security Engineering stakeholders
• Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise into our detection and alerting stack
• Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, and turn findings into durable detections
• Perform technical analysis of malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals
• Partner with Detection Engineering and Incident Response to translate intelligence into detection rules, hunting hypotheses, and incident context in near-real-time
• Curate and triage inbound intelligence from commercial feeds, open source, government, and trusted peer relationships — prioritizing what matters for Anthropic's threat model
• Contribute to threat models and risk assessments that inform security architecture and defensive investment across the enterprise
• Build and maintain external intelligence-sharing relationships with peer companies, ISACs, and government partners

Skills

Threat intelligence

Threat hunting

Incident response

Python programming

Job description

Anthropic is seeking a Threat Intelligence Engineer to track threat actors targeting AI labs and cloud infrastructure, turning findings into actionable detections and defenses. You will build automated pipelines to collect, enrich, and operationalize indicators of compromise, and run intelligence-driven threat hunts across endpoints, cloud, and SaaS telemetry.

You will also analyze malware and attacker tooling, translate intelligence into detection rules, and collaborate with incident response